IT-Security Engineer (m/w/d)

Overview

Description
We are currently looking for an IT Security Engineer (m/f/d).

Location: 100% remote

The project is to exchange VAT relevant payment data between different parties. An automated procedure is to be developed, by which the operator is enabled to accept messages of the platform operators at the beginning, to evaluate and assign the information contained therein, and to exchange these within a short period of time internationally and/or to forward them to the relevant national authorities.

Tasks:

– Integration and configuration of security tools using DevOps and OpenShift.

– Ongoing monitoring of application security, as well as interpretation of scan results.

– Ensuring secure operation of the cluster environments (staging)

– Integration and configuration of security tools for container environments

– Configuration and monitoring of the customer’s cluster policies

Skills:

– Experience in DevSecOps, as well as integrating security tools into CI/CD pipeline with a focus on information security.

– Hands-on mentality with affinity for software development

– Build and deploy experience in RHEL environment, as well as script development

– Basic experience on crypto procedures and their deployment, as well as IAM experience (RBAC) sets you apart

– Willingness to continuously improve and optimize security mechanisms and processes

– A dedicated and independent approach to work is required by the client

– Knowledge of working within agile IT projects in a highly regulated business environment

– The following technologies/methods are used in the customer project:

– Project Management: Scrum, DevOps/ DevSecOps, V-Model XT, Atlassian Jira, Atlassian Confluence.

– Frontend: Figma, React, NPM

– Backend: Apache Kafka, GO, Java, JEE, Spring, Open API, Swagger, REST, JSON

– Deployment: ArgoCD, MS Azure, Nexus, OpenShift, GitOps, SonarLint, SonarQube, Tekton, Red Hat

– Test: JUnit, Zephyr, Selenium

– IDE: IntellJ, VisualStudio

– Database: Oracle DB

– Other: Collaboard, OWASP ZAP